CVE-2026-4134

CVE-2026-4134 is a privilege escalation vulnerability discovered in Lenovo Software Fix that allows authenticated local users to execute code with elevated privileges during the software installation process. The vulnerability requires user interaction but presents a significant risk to systems running affected Lenovo products. The vulnerability carries a CVSS score of 7.3 (HIGH) with a local attack vector, low complexity, and low privilege requirements. Successful exploitation results in high confidentiality, integrity, and availability impact, potentially allowing attackers to fully compromise affected systems through code execution with elevated permissions. The vulnerability currently shows no evidence of active exploitation in the wild, with an EPSS score of 0.00014 indicating minimal real-world exploitation probability. No public exploit code is currently available, and community attention remains low, as evidenced by the vulnerability's inactive status on threat tracking lists and its absence from the Known Exploited Vulnerabilities catalog.